WatchGuard Firebox X Peak User Manual

Quick Start Guide

Guide de démarrage rapide Kurzanleitung Guida introduttiva

Guía Rápida

Firebox® X Core 550e, 750e, 1250e Firebox® X Peak 5500e, 6500e, 8500e, 8500e-F

4 5 6

LCD Display

Écran à cristaux liquides LCD-Display Display LCD

Pantalla LCD

Navigation Buttons

Boutons de navigation Navigationstasten Pulsanti di navigazione

Botones de navegación

Console Port

Port console Konsolenport Porta console

Puerto de consola

4 5 6

Power Light

Témoin d’alimentation Netzleuchte Spia alimentazione

Luz de encendido

Network Status Lights

Témoins de l’état du réseau Netzwerk-Statusanzeigen Spie di stato rete

Luces de estatus de la red

Network Interfaces

Interfaces réseau Netzwerkschnittstellen Interfacce di rete

Interfaces de red

English

Getting Started

• Find and record your serial number.

• Go to http://www.watchguard.com/activate

• Log in. (NOTE: If you are new to WatchGuard, follow the instructions to create a prole.)

• Follow the instructions on the screen.

• Copy your feature key to a text le. You will need it later.

Download software

• Continue or go to https://www.watchguard.com/archive/softwarecenter.asp

• Download the most current version of WatchGuard® System Manager and Fireware® appliance software.

• Record the names and locations of the les you download.

Choose between routed and drop-in mode

• Many networks operate best with a routed conguration, but we recommend drop-in

mode if:

- You have already assigned a large number of static IP addresses and do not want to change your

network conguration.

- You cannot congure the computers on your trusted and optional networks that have public IP

addresses with private IP addresses.

• Use the diagrams below to learn about Firebox® X conguration methods.

Routed N etwork Cong uration D rop-in Ne twork Congur ation

A) 50.1.1.1/24

B) 50.1.1.2/24

A) 50.1.1.1/24

B) 50.1.1.2/2

Set up the management station

• The management station is the computer you use to administer the Firebox X.

• Make sure the management station meets the requirements below.

• Run the WatchGuard System Manager (WSM) .exe le you downloaded in Step 2.

• Run the Fireware .exe le you downloaded in Step 2.

Minimum System Requirements

If you install WSM client software only

If you install WSM & WatchGuard Server software

Operating Browser CPU Processor Memory Available System Speed Disk Space

Windows Vista, XP SP2 IE 6, IE 7 Intel Pentium IV 1 GHz 512 MB 80 MB Windows 2000 Firefox v2 Windows Server 2003 Netscape v7

Windows Vista, XP SP2 N/A Intel Pentium IV 2 GHz 1 GB 10 GB Windows 2000 Windows Server 2003

Connect cables

and power cord

Eth 0 Eth 1

Router

Run the Quick Setup Wizard

• Make sure the management station is congured to accept DHCP-assigned addresses.

• Select Start > All Programs > WatchGuard System Manager > Quick Setup Wizard

C) 10.0.1.1/24 D) 172.16.1/24

A) Router

B) External Interface: Connects to the external network/Internet.

C) Trusted Interface: Connects to the private LAN/internal network.

172.16.0/2410.0.1.0/24

D) Optional Interface(s):

by the rewall but isolated from the trusted network.

E) Secondary Network:

network as one of the Firebox interfaces. This IP address is the default gateway for computers on this network.

Record your network information

Netwo rk Addresses PPPoE on Ex ternal Inte rface

Default Gateway ___________________________ User Name ___________________________

External Interface __________________________ Password _____________________________

Trusted Interface ___________________________ Static Address (optional)

Optional Interface _________________________ _____________________________________

Management Station _______________________

C) 50.1.1.2/24E) 10.0.1.1/24 D) 50.1.1.2/2

Connects to a separate network protected

A network that shares the same physical

DHCP Hos tname / ID on Ex ternal Inter face

Host ID (optional) ________________________

Additi onal Trusted IP Add resses

Secondar y Network on th e Trusted Inter face

_______________________________________

Next Steps

• Your Firebox X now has a basic conguration that allows all TCP, UDP, and ping

trac from trusted or optional interfaces to the external interface, and blocks all unrequested trac from the external interface to the trusted or optional interfaces.

• Put the Firebox in its permanent physical location.

• Make sure the management station and the rest of the trusted network use the IP address of the Firebox trusted interface as the default gateway.

• In WatchGuard System Manager, use management station to the Firebox.

• Congure WatchGuard servers and customize your security policy.

• For complete documentation, go to www.watchguard.com/help/documentation

File > Connect to Device to connect the

A) 50.1.1.1/24 A) 50.1.1.1/24

C) 10.0.1.1/24 D) 172.16.1/24

B) 50.1.1.2/24 B) 50.1.1.2/2

C) 50.1.1.2/24E) 10.0.1.1/24 D) 50.1.1.2/2

+ 7 hidden pages